Rex creates your wallets for you and signs your trades for you, in the bot and on the web, so you can trade with one tap and no wallet pop up. This is a trade off, and this page says plainly what it means.
Who can do what
| Who | What they can do |
|---|---|
| You | Trade, set orders, withdraw with your PIN, and export your keys. |
| Rex | Holds the access to your wallets at Coinbase's wallet service and signs the trades, orders and snipes you set. Limits and your PIN are checked by Rex's servers, so you are trusting Rex's code and operators with that access. Rex also signs its own work, such as paying referral rewards and creating NEAR accounts. |
| Anyone with your Telegram account | Trade, set orders and change settings. They cannot withdraw or export keys without your PIN. If you have not set a PIN yet, they could set one, so set yours first. |
Because Rex signs for you, protect your Telegram account with two step verification and a PIN you do not reuse. If someone controls your Telegram session and learns your PIN, they can move your funds, up to your limits.
Your wallets
Rex makes one NEAR account, one address that is shared by Ethereum, Base, BNB Chain, Polygon, HyperEVM, Robinhood and Arc (each chain keeps its own balance), one Sui address, and one Solana address that Fogo shares. Your NEAR account is created the first time you open NEAR.
Your keys
Your wallets are created and held through Coinbase's wallet service. /export opens a page where you can take your keys and use them in another wallet. It needs your PIN and a confirmation from you in Telegram, is limited to 3 in any 24 hours, and every export is logged. The key is encrypted to a key made in your browser and handed over once. It is never shown in the chat.
Your PIN
- It is 6 digits. A PIN that is one digit repeated, such as 111111, or a straight run, such as 123456 or 654321, is refused.
- 5 wrong tries in a row lock the PIN for an hour. Each lock in a row doubles the last one, up to 24 hours, and a right PIN starts over.
- If you forget it, a reset takes 24 hours, and a right PIN cancels it. After the new PIN is set, withdrawing, bridging out and exporting keys wait a short hold, 2 hours by default, so a thief cannot reset and drain you at once. Buying and selling are not held.
- If someone else set a PIN, or you see a send you did not make, tap "Not me, freeze my wallet". That clears the PIN, blocks a new one for 24 hours and logs out every web session.
Limits that protect you
Rex caps a single buy at about $1,000, buying in any 24 hours at about $50,000 and withdrawals in any 24 hours at about $5,000. You can set lower limits for yourself. Raising them again takes an hour and you are told. Limits has the detail.